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(57) ABSTRACT 

The identity verification system employs biometric technol- 
ogy for identity verification. Positioned at the center of the 
system is a stylus with any of a number of biometric 
properties or their combination or with one or more metric 
sensors, while the customer uses the stylus to sign his/her 
name, or even for writing anything. The identity verification 
system is used at point-of-sale terminals, in various closed 
environments, to access a computer network, in applications 
involving pen-based computers and smart-pens, and for 
e-commerce. When fingerprint sensors are used, the sensors 
are positioned in the stylus grip, one sensor for the index 
finger, and a second sensor for the thumb. In one variation, 
one-to-one biometric matching is used. Each participant 
carries on his/her person a device that includes an encrypted 
biometric for reference purposes to gain access into the 
system. Processing is simplified since the system need only 
make a "MATCH" or "NO MATCH" decision. In a second 
variation that is particularly useful in closed environments, 
one -to -many biometric matching is used. During each event 
access request, the community of reference prints is 
searched for a match with the applicant. Each member of the 
community need carry nothing on his/her person to partici- 
pate in the system. In either variation, the stylus is either 
attached to each site or is portable, one such stylus being 
carried by each participant. 

8 Claims, 18 Drawing Sheets 
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WRITING IMPLEMENT FOR IDENTITY 
VERIFICATION SYSTEM 

This Application is related to and claims priority under 
U.S. Provisional Application No. 60/163,433 filed Nov. 3, 
1999; U.S. Provisional Application No. 60/154,590 entitled 
"Writing Implement For Identity Verification System" filed 
Sep. 17, 1999, U.S. Provisional Application No. 60/144,028 
entitled "Biometric Pen And Encryption Device" filed Jul. 
16, 1999, PCT Application No. PCT/US99/07900 entitled 
"Biometric Hotel and Casino Play" filed Apr. 7, 1999, U.S. 
Provisional Application No. 60/119,408 entitled "Identifi- 
cation Confirmation System" filed Feb. 10, 1999, U.S. 
Provisional Application No. 60/116,212 entitled "Identifi- 
cation Confirmation System" filed Jan. 12, 1999, U.S. Pro- 
visional Application No. 60/114,632 entitled "Identification 
Confirmation System" filed Jan. 4, 1999, U.S. Provisional 
Application No. 60/109,511 entitled "Biometric Writing 
Implement" filed Nov. 23, 1998, U.S. Provisional Applica- 
tion No. 60/088,498 entitled "Biometric Hotel and Casino 
Play" filed Jun. 8, 1998, and U.S. Provisional Application 
No. 60/080,962 entitled "Biometric Hotel and Casino Play" 
filed Apr. 7, 1998. 

FIELD OF THE INVENTION 

The invention relates generally to a system for authenti- 
cating the identification of a person using biometric means, 
and more particularly, for use at point-of-sale terminals, for 
use in various closed environments, for accessing a com- 
. puter network, for applications involving pen-based com- 
puters and smart-pens, and for e -commerce. 

BACKGROUND OF THE INVENTION 

Wireless (e.g., radio, infrared, microwave) communica- 
tion links now enable computer systems comprised of very 
small portable computers that have the capability of being 
networked at all times and in all locations. Production of 
small, portable computers is the strongest trend in the 
computer industry, and wireless communication is one of the 
strongest trends in the telecommunication industry. 

The visible difference of pen-based computers from other 
technologies is in the use of a stylus (e.g. — a pen or pencil) 
as the primary means of interaction between a user and a 
machine, picking up the familiar pen and paper interface 
metaphor. With pen computing, a pen-like stylus is used on 
a digital surface to write and annotate information. Within 
the special computer is contained a digitizer which captures 
and interprets the text that is entered. 

The global workforce is increasingly mobile and pen- 
based computing is on the rise. Smart handheld devices are 
emerging from the realm of individual purchases to enter- 
prise deployment as they become key tools for connectivity 
to the corporate environment. Development of handheld 
applications and wireless technology tailored for the enter- 
prise represent are serving the increasing the remote and 
mobile worker population. 

Credit cards were originally introduced to for use at POS 
terminals to replace charge- a-plates. Plastic charge cards, 
debit cards, ATM cards, stored value cards are fair game for 
thieves. It is not uncommon for people to carry more than 
eight cards in their wallets. The cards must be replaced every 
few years, and the cards may become damaged with frequent 
usage. In addition, consumer fraud and card counterfeiting 
are on the rise. The cards can be easily lost or stolen, 
signatures can be easily forged and PIN's can be readily 
determined by others. Hence, while plastic cards are easier 
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to carry than money, they are almost as negotiable as money 
to sophisticated criminals. 

Also, a devastating pattern of security lapses is laid out in 
a 1999 congressional report on China's acquisition of 

5 America's most vital nuclear and missile secrets. Beijing 
remains far from nuclear parity with the United States. The 
federal government is right to concern itself with protecting 
America's computer networks against cyber attacks by 
terrorists or foreign governments. Computer network secu- 

io rity is a real and growing problem. The Federal Government 
needs to protect not just sensitive defense secrets, but also 
the computers that manage air traffic control, Social 
Security, Medicare and a host of other civilian programs. 
Also, while E -commerce and smart pen technology find 

15 increased acceptance, the future growth of these technolo- 
gies will continue to be hampered by security concerns. 

The use of physical attributes — fingerprints, a voiceprint, 
or any of several other characteristics — to verify identity has 
great potential. Passwords and personalidentification num- 

20 bers (PIN's) are fraught with problems. Biometrics offers 
solutions. Applications that are preparing to accept biomet- 
ric data include computer networks, ATMs, cars, cellular 
phones, and dozens of other types of embedded systems. 
Widespread acceptance of biometrics means use in areas 

25 that daily affect the lives of millions of people. By replacing 
PIN's, biometric techniques prevent the unauthorized access 
to or fraudulent use of ATM's, cellular phones, smart cards, 
desktop PC's, workstations, and computer networks. For 
financial transactions conducted via telephone and wire, 

30 biometrics can replace PIN's and passwords. In buildings 
and work areas, biometric techniques replace keys, badges, 
and readers. 

By replacing PIN's for transfers of funds to the cards, 

35 biometrics enhance the security of credit/debit-card (plastic- 
money) systems and prepaid telephone calling cards. Bio- 
metric techniques also provide security not previously envi- 
sioned for "cash" balances stored in such cards. For POS 
terminals, biometric techniques can replace a clerk's veri- 

^ fication of a customer's signature. 

Biometric techniques can also potentially replace driver's 
licenses or passports for authenticating the identity of airline 
passengers. Similar techniques can replace or supplement 
passports and visas for establishing the identity of people 

45 seeking to cross national borders at customs and immigra- 
tion checkpoints. 

In hospitals, biometric techniques can replace ID brace- 
lets to establish patients' identities-for example, before 
blood administration. Biometrics could help confirm the 

50 identity of people seeking public assistance, Medicare, and 
other government and insurance benefits. 

In these applications, biometrics would replace or supple- 
ment a variety of systems, of which photo ID's are probably 
the most popular. Biometrics can also authenticate e-mail 

55 and other documents transmitted via computer networks. 
An example of a rapidly growing biometric technology, 
fingerprints offer an infallible means of personal identifica- 
tion and are rich in information content. The use of finger- 
prints for identification dates back many decades, but gained 

60 wide acceptance about 100 years ago. Fingerprints are the 
biometric that form the basis of all worldwide identification. 
Fingerprints don't change with time while other physical 
characteristics do. Fingerprint minutiae uniquely identify 
fingerprints. It has been proven that minutiae, were unchang- 

65 ing and rep eatable features of each fingerprint, and were 
individually unique. Each finger has a unique arrangement 
of ridge detail. There are two major types of information in 
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a fingerprint. First is the ridge flow information, and second locally (a) eliminating most privacy concerns (b) simplify- 

is the specific features or minutiae (minutia) of the finger- ing system logic while improving system speed, and (c) 

print. As used herein, the term "minutia" is used to denote reducing the complexity and cost of the biometric sensors, 

both the singular and plural. Fingerprints uniquely identify ^ ^ needed is a pen - b ased system that will provide 

an individual based on their information content. Infonna- 5 customers with the privacy that they may want while ensur- 

tion is represented in a fingerprint tby the minutia and their ^ ^ { Qf ^ ^ ^ a 

relative topological relationships, lne number or mmutia m , ° _. , ** ./ . . . . • I r * 

a fingerprint varies from one finger to another, but, on ^ ed & f™ * at ^f? ™ hardware * * e P^t-of-sale 

average, there are about eighty (80) to one hundred and fifty terminal other than a stylus (many similar type s yh being 

(150) minutia per fingerprint. In the fingerprint context, a in already in place); a system that will significantly reduce 

large store of fingerprints exists in law enforcement offices 10 transaction time; a system that is convenient to use and 

around the country. Since fingerprints never change, a unobtrusive to customers; a system that provides improved 

person need only be fingerprinted once to be in the system. processing speed and accuracy; a system that is secure and 

U.S. Pat. No. 5,680,470 (Moussa et. aL) discloses a safe from Ulegal entry; aod a system for confirming personal 

method of signature verification involving a set of template identification that is reliable, a system that will actually 

signatures that are examined for test features which are 15 discourage thieves. 

normalized and irrelevant features are removed. Similarly, t ^ rx , w A ^ w __ _ TVTT rr4irriAir 

U.S. Pat. No. 5,559,895 (Lee et al.) discloses a system for SUMMARY OF THE INVENTION 

real time signature verification where the signatures are ^ identity verification system of the present invention 

digitized for statistical analysis and various personal features addresses these needs and revolutionizes the nature of 

are selected. 20 p en _ Dased eveQ t access. Positioned at the center of the 

Current stylus-type verification systems use metric-type tem ^ a st Lus ^ of a number of biometric 

sensors-accelerometers and pressure sensors to measure ^ or the i r combination or with one or more metric 

stylus pressure and ^ s^oke sweep m the users signature.^ &e ^ ^ &i Ms/her name or even for 

Pat. No. 5,774,571 (Marshall) discloses a stylus with mul- . .. ... ^ . A & , % ' . 

4 . , r * ■ -c*- * writing anything. The identity verification system or the 

tiple sensors for biometric verification including grip pres- 25 * • * • i. J * ™o • i • 

sure sensors and gyroscopes. U.S. Pat. No 4^513,437 present invention can be used at POS tennmals, m various 
(Chainer et al.) discloses another data input stylus for strolled environments, to access a computer network, in 
signature verification which includes accelerometers and applications involving pen-based computers and smart-pens, 
pressure sensors. U.S. Pat. No. 5,247,137 (Epperson) dis- for e-commerce, conventional writing implements, and 
closes a stylus that enables biometric identification by means 30 multi-purpose wnting implements. 

of comparison of graphics data and textural data from a The biometric properties that can be captured include, but 
remote location. The stylus also captures strokes and ges- are not limited to, fingerprints (fingerprint sensors), voice 
tures which can also be used for confirming identification. recognition (e.g. — microphone), facial imaging (e.g. — 
U.S. Pat. No. 5,103,486 (Grippi) discloses a system for camera), and DNA and other biotech properties (e.g. — cell 
using a combination of biometrics at POS terminals. Prisms 35 capture/analysis sensors). Metric properties include, but are 
are used to capture the fingerprint of the index finger while not limited to, grip and point pressure (e.g. — pressure 
the individual signs his/her name. The fingerprint image and sensors), position of the index finger relative to the point, 
the signature are processed to form a composite represen- position of the thumb relative to the index finger (e.g. — 
tative for comparison with information shown on a credit thermal sensors), angle of the stylus during usage (e.g. — a 
card for processing of commercial transactions. ^ gyroscope), speed of signing (e.g. — a timer), increases and 

What is needed is a pen-based system that enables an decreases of speed during signing (e.g. — an accelerometer). 
event to occur only when identity has been confirmed, the The stylus is either tethered (attached) to each site or is 
system employing state-of-the-art sensors (a) that can be portable, one such stylus being carried by each user, 
used for signature verification at point-of-sale terminals that In a first preferred embodiment of the identity verification 
captures biometric data in a nonobtrusive manner, while 45 system of the present invention, one -to-many biometric 
serving as a system that can eventually replace card-based matching is used. This embodiment is particularly useful in 
transaction systems; (b) that can authenticate identity con- controlled environments such as hotels, hospitals, and mili- 
tinuaUy in pen-based computing systems to ensure that the tary bases, where the size of the community is limited. One 
person seeking access to information has pre-approved or more biometrics (and metrics) are captured for reference 
authorization for such access; and (c) that is compatible with 50 purposes during registration. During each event access 
smart pens ensuring the use of the pen and access to data request, the community of reference prints is searched for a 
through the pen has been pre-approved. match with the user. Each member of the community need 

What is needed is a system that is compatible in smaller carry nothing on his/her user to participate in the system, 
closed environments where the size of the community is In a second preferred embodiment of the identity verifi- 
limited for confirmation of event access without the need for 55 cation system of the present invention, one-to-one biometric 
encryption techniques once identification has been verified matching is used. Tliis embodiment requires each user to 
by biometric means; a system that enables the use of carry on his/her user a device that includes an encrypted 
biometric sensors in a broad range of applications while reference biometric for reference , purposes to gain access 
eliminating the need for separate biometric sensors and units into the system. The encryption device can be the stylus, a 
with wiring that would otherwise need to be integrated into eo card, a stylus insert (as herein described), or a device carried 
the existing systems; that is user friendly, nonobtrusive to on a key-chain. Processing speeds for this embodiment 
use, virtually impregnable to criminals, that enables autho- considerably faster than the first preferred embodiment, 
rized access to certain events while barring unauthorized since the system need only make a "MATCH" or "NO 
access, that can be readily adapted to include any number of MATCH" decision. While the processing can occur at a 
pen-based applications 65 central computer, it is preferred that the matching logic be at 

What is needed is a pen-based system that is compatible the access site, inside a smart card, or inside a smart pen to 
with encryption technology so that event access is confirmed minimize privacy concerns. 
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One preferred application for the identity verification made to the following detailed description and accompany- 
system of the present invention involve pen-based comput- ing drawings in which the presently preferred embodiments 
ing systems. Pen-based computer systems are ideal for of the invention are shown by way of example. As the 
applications which require: (1) highly portable devices — invention may be embodied in many forms without depart- 
that are no longer constrained by a keyboard; (2) intuitive 5 ing from spirit of essential characteristics thereof, it is 
features — that resemble an environment familiar to the expressly understood that the drawings are for purposes of 
users; (3) improved efficiency, — that enables accurate data illustration and description only, and are not intended as a 
collection and manipulation; and (4) flexibility— that definition of the limits of the invention. Throughout the 
enables a wide variety of types of data entry Several description, like reference numbers refer to the same corn- 
applications of the identity verification system of the present 1Q t thrmi ^ out the sevcral vicws 
invention include: 

Nurses and doctors can track and record patient histories BRIEF DESCRIPTION OF THE DRAWINGS 

as they make their rounds, using cHpboard-like com- iA discloses the preferred embodiment of the multi- 

puters and pens to access and enter patient information 4 _ c . * , . 

over a wireless network torn servers throughout the P^ose stylus of the present mvention; 

hospital. 15 FIG. IB discloses a preferred embodiment of a functional 

Insurance claims adjusters can assess automobile dam- block diagram of the identity verification system of the 

ages on site, looking up relevant cost information with present invention; 

the pen, then printing the estimate and writing a check FIG. 2A discloses a writing stylus with fingerprint sensors 

to the repair shop at the end of the visit. for use in the system of the present invention with a built-in 

Sales representatives can track inventory and the effect of 20 grip; 

promotional campaigns in retail stores, using a pen fig. 2B discloses a section of the writing stylus shown in 

computer. At the end of the day, the information is pj£ 2A taken along 2A— 2A; 

transmitted through a phone line back to headquarters. prG 3Adiscloses a purred embodiment of the writing 

Another - premier application of the identity verification styluswithgrip forllse in the system of the present invention 

system of the present invention involves POS terminals with 25 ' b . r . 

either one or two fingerprint sensors disposed within the ^ a m " m SPP* 

stylus. The stylus enables signature verification at POS FIG. 3B discloses the print images obtained from the print 

terminals, either with credit-type cards, or in lieu of such imaging sensors in the writing stylus of FIG. 3A; 

cards. The user signs his/her oame using the biometric FIGS. 3C and 3D disclose additional embodiments of the 

stylus. The prints are again captured and compared to the 30 stylus, me fingerprint sensor being disposed within an insert 

prints of all registrants in search of a match. Once the positioned on the click-button on the top distal end of stylus 

financial institution confirms that there are sufficient funds in having a retractable point; 

the account, the amount is debited from the account, and the FIG. 4A discloses an assembly view of one preferred 

transaction is approved. embodiment of the stylus of the present invention with the 

The stylus enables the conversion at POS terminals when 35 fingerprint sensor configuration in the top of the stylus; 

used to verify signatures. A cardholder can transfer fluids FIGS. 4B, 4C, and 4D disclose various grip configura- 

into a new account at a POS terminal by use of a credit card tions which provide alignment of the print sensors with the 

at a POS terminal by using the stylus of the present inven- m d e x finger and thumb; 

tion. The cardholder swipes his/her card through the car- F[GS 5Aj 5B 5C 5D) SB disclose various grip 

dreader and signs and prints his/her name using the stylus of 40 configurations that are compatible with conventional sty- 

the present invention. The prints are captured and the i uses and pencils, the grip including a cord connection to the 

cardholder advises the credit card financial institution of the writing surface, and sensors being incorporated into the grip; 

amount to be transferred Account information is exchanged F[G 6 a simplificd logic ^ m of oae 

and the card is not needed next time. embodiment of the identity verification system of the present 

Registration using the identity verification system of the 45 ^ demonstrating how a user registers for participa- 

present invention is similar to opening a new bank account. ^ ^ ^ svstenr 

Initially, the user registers by using the stylus. Tl» applicant ^ p m 

provides the financial institution wj* l b a si c •nformauon; embodiment of ^ identity ve ? fflcatioD g sys tem of the 

name, address, phone number, and signature. The only . . , 4 4 - u *u 

* . t , \\, t . -.J fT .. ^ , cn present invention demonstrating how the user accesses an 

difference is that the stylus of the present invention enables 50 ^ . 6 

the capture of biometric data while the applicant signs e „ ™ „ e \ Sy * ' . Vfi J , . 

his/her name. Another way to register at POS terminals, is to FIGS. 8 discloses a simplified logic diagram for use with 

replace styluses currently used for signature verification the identity verification system of the present invention, 

with the biometric styluses of the present invention. Once ^Dbng a user to convert from a card-based transaction 

the prints are initiafly captured, the card isn't needed. The 55 system to a pen-based transaction system without the need 

next time the cardholder wants to access the same account for any cards in subsequent transactions; 

he need only sign his/her name. Of course, the cardholder FIGS. 9 discloses a payment selector used by a user to 

can also continue to use the card. select which account the transaction is to be paid from in 

Styli with metric sensors and signature verification sys- another variation of the identity verification system of the 

terns are already beginning to appear at some POS terminals. 60 present invention; 

These stylus do not capture fingerprints, but rather are used FIG. 10 discloses a keypad for use with a digitizing 

only for purposes of signature verification. Initially, the surface to enable data entry such as a primary identifier for 

system of the present invention will verify signatures replac- use with the identity verification system of the present 

ing these styluses. Next, the use of credit and debit cards will invention; 

become optional. 65 FIG. 11 discloses another preferred embodiment of a 

For a more complete understanding of the identification simplified process flow path for identity verification using 

verification system of the present invention, reference is the biometric identification system of the present invention; 
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FIGS. 12A and 12B disclose a flist preferred embodiment The stylus 15 of the present invention has numerous uses, 

of the stylus insert of the present invention; and primarily for purposes of illustration, include signature 

FIGS. 13A and 13B disclose a second preferred embodi- verification at POS terminals, pen-based computers user 

ment of the stylus insert of the present invention; identification, and to provide improved convenience to 

J r 5 guests within various controlled environments. 

FIGS. 14A, 14B and 14C disclose a third preferred p os i tioDed at the center of the system is a stylus 15 with 

embodiment of the stylus insert of the present invention; any of a number of biometric properties or their combination 

FIGS. 15A and 15B disclose a fourth preferred embodi- or with one or more metric sensors, while the user signs 

ment of the stylus insert of the present invention; his/her name, or even for writing anything. The identity 

FIG. 16 shows the identity verification system of the 10 verification system of the present invention 10 can be used 

present invention as incorporated into a smart pen; at pos terminals, in various controlled environments, to 

T-r^n ..-t-, , , 4 f ., access a computer network, in applications involving pen- 

FIGS. 17A, 17B, and 17C show the stylus system of the . -, f j - a e 

. ' ' ' J • r based computers and smart-pens, and fore-commerce, con- 
present invention as used various configurations of pen- ventional implement, and multi-purpose writing 
based computers, including (a) a lap-top computer, (b) a implements . The stylus 15 is either tethered (attached) to 
palm-type computer; and (c) a hand-held computer, respec- is each site or ^ portable, one such stylus 15 being carried by 
tively; each user. 

FIG. 18 shows the identity verification system of the In a first preferred embodiment of the identity verification 

present invention in an e-commerce application being used system of the present invention 10, one-to-many biometric 

when the user signs his/her name; matching is used. This embodiment is particularly useful in 

FIG. 19 shows the identity verification system of the 20 controlled environments such as hotels, hospitals, and mili- 

present invention as used in a multi-purpose application, tarv base L s ; where *J size of the community is limited. One 

including a conventional pen, a conventional pencil, and a or more ^ometncs (and metrics) arc captured for reference 

stylus for use with a pen based computer; purposes during registration. During each event access 

' . request, the community of reference prints is searched for a 

HG.20A discloses sull yet another preferred embodiment ^ match ^ the user Each member of ^ community need 

of the identity verification system of the present invention, carry notnm g 0Q his/her user to participate in the system, 

the stylus being foldable into a card, the card having an IC This embodiment can also be used in open environments in 

chip with an encrypted biometric print and biometric print combination with the user supplying additional information 

sensors embedded in the card, the card-pen being compat- during each request for event access (i.e. — printed name, 

ible with conventional card readers, the card-pen beingun 3Q phone number, social security number). See for example 

foldable lengthwise for transformation into a pen; and FIG. U.S. Pat. No. 5,805,719 (Pare, Jr., et. al.). 

20B shows the card of FIG. 20A after folding for use as a i n a second preferred embodiment of the identity verifi- 

stylus. cation system of the present invention 10, one-to-one bio- 

ncTATT cri ™ c ™ r rrrroM nc tuc metric matching is used. While this system can also be used 

I^^^^}^^v^ 35 in controlled environments, it is preferred in open environ- 

PREFERRED EMBODIMEN 1 & ment situations where thc size of the ^ continu- 

Ref erring now to the drawings, in the broadest terms the ally expanding through registration without limitation. This 

preferred embodiment of the identity verification system of embodiment requires each user to carry on his/her user a 

the present invention as shown in FIG. 1 comprises a stylus device that includes an encrypted reference biometric for 

15 with biometric sensors 20 disposed in a grip 30, and a 40 reference purposes to gain access into the system. The 

computer processing unit 40. encryption device can be the stylus 15, a card (e.g. — credit, 

As used herein unless the context indicates otherwise, a debit, ATM, check, driver's license, identification card), a 

"stylus" is any device that is compatible with either the hand stylus cap, a stylus grip a stylus insert 50 (as herein 

or finger of the user for purposes of making a marking on an described), a device carried on a key-chain, as a piece of 

essentially flat surface. While the drawings depict a conven- 45 jewelry, as an implant device, or by some other means. The 

tional shape of a stylus, other shapes and designs are also encryption device is compatible with the system described in 

included within the scope of the present invention such as copending PCT Application PCT/US99/07900. Processing 

any attachment to a finger or any implement that can be held speeds for this embodiment considerably faster than the first 

with a hand for such purpose. Also, as used herein unless the preferred embodiment, since the system need only make a 

context suggests otherwise, the term "fingerprint" refers to 50 "MATCH" or "NO MATCH" decision. Since the matching 

either the print of the index finger or the thumb. In addition, is preferably one-to-one as opposed to one-to-many, the 

as used herein unless the context suggests otherwise, the quality of the sensor need not be forensic quality although 

term "biometric" that are unique to the actual physical one is preferred and, only one sensor is needed. While the 

features of the user including, but are not hmited to, finger- processing can occur at a central computer, it is preferred 

prints (fingerprint sensors), voice recognition (e.g.— 55 that the matching logic be at the access site or a regional site 

microphone), facial imaging (e.g.— camera), and DNA and to minimize privacy concerns. 

other biotech properties (e.g. — cell capture/analysis Preferably, the processing occurs within the pen, an 
sensors). The signature of the user is generally not consid- identification card, a smart card, or within a processor at the 
ered to be a biometric, unless otherwise indicated in the site of the transaction. In another preferred embodiment of 
context of which it is used. Biometrics, are to be distin- 60 the present invention 10, the processing occurs at the POS 
guished from the term "metrics" which include, but are not terminal. In yet another preferred embodiment of the present 
limited to, grip and point pressure (e.g. pressure sensors), invention 10, the processing takes place at a regional com- 
position of the index finger relative to the point, position of puter. Localized processing is preferred for purposes of 
the thumb relative to the index finger (e.g.— thermal simplicity, speed, and to ensure individual privacy. As the 
sensors), angle of the stylus 15 during usage (e.g.— a 65 processing moves up the chain, it becomes more complex, 
gyroscope), speed of signing (e.g. — a timer), increases and Of all the areas of biometrics, fingerprint sensing has 
decreases of speed during signing (e.g. — an accelerometer). captured the imagination of the largest number of compa- 
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oies. Four integrated circuit manufacturers embody unusual portables, desktops or servers, and assists with finger place - 
fingerprint-sensing technologies in new chips. ST Micro- ment. TouchSafe Personal uses an internal 32-bit RISC 
electronics and Veridicom provide integrated circuit processor, compact optics and encrypted serial communica- 
approaches — are dc-capacitive sensors, Harris Semiconduc- tions. The optional smart card reader can store the finger- 
tor Corp. provides an ac-capacitive sensor. Thomson- CSF's 5 print template and other confidential data. The Identix 
FingerChip uses thermal sensing. Each integrated circuit TouchPrint 600 Live-Scan Workstation is a fingerprint sys- 
sensor produces a high-resolution (several-hundred-pixels tern that produces forensic-quality tenprint records by elec- 
by several- hundred-pixels by 8 or 16 bits) image of a finger Ironically scanning and capturing rolled fingerprints, 
tip. These images are comparable with those obtained by ST Microelectonics Model #STFP20l5-50, a fingerprint 
pressing inked finger tips onto absorbent paper. Automatic sensor, TouchChip, clusters 100,000 sensors onto a 20-by- 
fingerprint-identification systems can process images 15-millimeter surface. The sensors, which individually mea- 
obtained from bio metric sensors just as easily as from sure 50-by-50 micrometers, incorporate an active pixel and 
images obtained from inked fingers. two capacitive plates per sensor element. All told, the array 
In uncompressed form, the images occupy several hun- consists of more than 98,000 pixels, enabling it to achieve 
dred kilobytes. Many fingerprint-based authentication sys- resolutions of 508 dpi. Two metal plates are placed in the 
terns store the images in a compressed form, in which they <*U are*, separated by a passivation oxide. The skin surface 
occupy approximately 10 kbytes. Although the image com- acts as a ihud P late > separated by a dielectric layer with 
pression employ lossy algorithms, the algorithms are tuned variable ^ckness. The sensors convert the distance between 

for fingerprint recognition. Generally, there is little or no "S er ***** surfa< f devic 5 l ° aa electrical signal, 

. 4 i j ,i j j and because fingerprint valleys are farther from the sensor 

difference between the original and the decompressed „ - iL . , & r iL \ j.^ , . . „. 

. ° . ,« . r ^ , 20 surface than ndees, they produce a dinerent output. Since 

images. An even more compac way to store the important ^ cW ^ tQ ^ CQn {i ^ h / fookd b 

features of fingerprmts is to extract minutiae. Minutiae are photographic ^ chip mcludcs m 8 -bit parallel 

the pomts at which fingerprint patterns branch and end. A data intelfece md m I2C interface. Power consumption is 

minutiae file can occupy as much as 1200 bytes. Either way, less man ^ mega^ at 5 volts. An on-board A/D 

minutiae files significantly compress the original image. ^ converter eliminates the need for much of the external 

The dc-capacitive fingerprint sensors from STMicroelec- circuitry. It's basically a stand-alone sensor, and the sensor 

tronics and Veridicom comprise of rectangular arrays of is so small that you can incorporate it onto a keyboard, PC, 

capacitors on a silicon chip. One plate of the capacitor is the or cell phone. 

finger to be sensed; the other plate is a small area of a pixel The stylus 15 includes one or more sensors 20 that capture 

disposed upon the surface of the chip. The ringer is posi- 30 biometric properties of the user. The computer (chip) 40 

tioned against the surface of the chip — actually, against an processes the captured information to determine whether to 

insulated coating on the surface of the chip. The ridges of the enable access to an account/network/entry, or other entry or 

fingerprint are close to the nearby pixels and have high privilege ooce identification has been confirmed. In one 

capacitance. The valleys are more distant from the pixels preferred embodiment, the system includes means to enable 

nearest them and have lower capacitance. The sensor then 35 the user to enter a primary identifier, the identifier being a 

draws a fixed charge from each pixel in turn — that is, it scans series of letters, digits, a spoken word converted to text 

the pixels. A high voltage appears on pixels to which the (speech recognition), or the like. The primary identifier is 

finger has low capacitance, and a low voltage appears on preferably the user's printed name, the user's birthday (and 

pixels to which the ringer has a high capacitance. year), zip code, mother ■ s maiden name, or PIN or password. 

Veridicom, Inc. uses a CMOS chip. These plates are 4Q The biometric stylus 15 of the identity verification system 

covered with a thin layer of dielectric. When a finger is of the present invention 10 has print imaging sensors 20 in 

placed on top of the chip, each sensor acts as the bottom the grip 30 to sense the index fingerprint and thumb print, in 

plate of a capacitor, with the surface of the finger acting as addition to other biometric sensors 20 including but not 

the top plate. The Veridicom chip is as small as a postage limited to the following: pressure sensors (point and grip); 

stamp — can be easily embedded into laptop computers and 45 accelerometers; gyroscopes; position of index finger relative 

keyboards. Accompanying circuitry measures the capaci- to point; position of thumb relative index finger. FIG. 11 

tance of each of these sensors. Fingertip "valleys" are further discloses a simplified logic diagram where multiple biomet- 

from the chip, and show as a lower capacitance. Fingertip ric sensors 20 are used to determine account confirmation, 

"ridges" yield a higher capacitance. The chip's dielectric The biometric stylus 15 of the identity verification system 

technology enables people to touch the sensitive, silicon 50 of the present invention has print sensors 20 positioned 

chip without destroying it. The dielectric is chemically and within the unique grip 30 (see FIGS. 2 A and 2B). Electronic 

mechanically strong enough to allow repeated contact with images of the index finger and thumb are extracted during 

people's fingers, yet electronically sensitive enough to cap- use. Thereafter, the user utilizes a similar stylus 15 to submit 

ture the prints. Other suppliers of CMOS fingerprint sensors a set of prints for comparison with the set of prints of the 

are Siemens, and Harris. ss authorized user — the prints either match or don't match. The 

Identicator Technology Inc. uses Identicator's DFR-200 use of two prints makes a mistake highly unlikely. The stylus 
reader technology and its software algorithm technologies. A 15 thwarts forgers since even if the signature is the same the 
matchbox-sized fingerprint reader enables full feature prints are not (the content of the writing is unimportant). The 
extraction and match in less than one second. Instead of stylus 15 is provided by financial institutions, POS 
entering an ID and password to get into a corporate network, eo terminals, and government agencies worldwide. The prin- 
users simply put their finger atop the glass lens of a tiny ciples of the biometric stylus 15 are combined with other 
reader affixed to the personal computer. The device photo- biometrics housed within the stylus 15 to provide near 
copies the print and compares it to a database of thousands perfect confirmation. Digital systems evaluate the finger- 
of other prints in well under a second. The Identicator print print by comparing the similarity, number, and unit relation- 
sensor enables secure user authentication on PC's. 65 ship of the points of distinction. 

TouchSafe Personal from Identrix is a state-of-the-art There are several basic embodiments of a fingerprint 

fingerprint verification reader. The design works with stylus 15; 
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(1) a stylus 15 is attached or tethered to a system; is compared with the encrypted print in the smart card 60. If 

(2) a device compatible with the tethered stylus 15 is there is a match the event is allowed to proceed. If there is 
completely portable; and no match, the event is blocked. 

(3) a stylus 15 for a pocket or hand-held computer that is The insert 50 is compatible with the stylus 15 or the stylus 
personal to the individual. 5 grip 30 or the stylus top (retractable point) and enables 

FIGS. 12A and 12B disclose a first preferred embodiment access with one-to-one matching for a wide variety of 

of the stylus insert 50 of the present invention; FIG. 13A and computer security applications — for controlling access to 

13B disclose a second preferred embodiment of the stylus network services, or anywhere a password, cookie, token, 

insert 50 of the present invention; FIGS. 14A, 14B and 14C digital certificate or smartcard is used. The insert 50 can be 

disclose a third preferred embodiment of the stylus insert 50 10 plugged into any standard USB port. Like smartcards and 

of the present invention; and FIG. ISA and 15B disclose a other cryptographic tokens, the insert 50 provides an alter- 

fourth preferred embodiment of the stylus insert 50 of the native to a smartcard anc j smar tcard reader, 

present invention ^ 5Q provides users and rcmotc clie[lts ^th 

In another preferred [embodiment, the insert 50 fits onto g authentication for ensuring secure access to virtual 

the cap of the stylus 15. The term insert as used herein is . f . , , . , 

< • ,i . ■ i j . j o -j mi 15 private networks and secure computer network equipment, 

a device that includes an encrypted reference identifier. The . . >j *■ j * . ■ j • li 

insert 50 contains the encrypted print and the name of the Through user idenfcfication data contained in each key, a 

user owning the card. The insert is also linked to one or more s u ccure » etwork 1S *^ to grant or deny access according to 

accounts. The grips 30 are for use with a narrow stylus 15 ^ authorization level of each user. The insert 50 is small 

about the size of a pencil or a conventional BIC® pen. This enou g h to carrv 011 a ke y nn S 01 the ^ for usc as access 

enables a deeper grip 30. The grip 30 almost completely 20 token for virtual private networks. Users need not memorize 

surrounds the index finger enabling the use of a sensor the multiple passwords or jump through numerous security 

size of a postage stamp. Almost any sensor the size of a screens. USB is a new connect technology featured as 

postage stamp which is the size of most fingerprint sensors. standard equipment on desktop systems, servers, and por- 

Also, single sensor may be used in sites where smaller table computer devices currently being marketed, 

transactions are involved. The stylus insert 50 of the present 25 Each insert 50 contains one or more encrypted references, 

invention is preferably stored in wallet or on key-chain for which are unique to each user. Using this secret value, the 

ready availability. The insert 50 is compatible with the insert 50 can compute a cryptographic response to chal- 

system described in copending PCT Application PCT/US99/ lenges sent from the network. This method has significant 

07900. security benefits over passwords. Specifically, the insert 50 

There are numerous advantages to having a stylus 15 or 30 computes a "one-way hash function" using the challenge 

an encrypted print for each user: (a) the biometric sensing is and its encrypted reference as input. The insert 50 is secure 

far less complex since the sensors 20 need only confirm a and proves to the server that it knows the secret value, 

one-to-one match and generally only one sensor is needed without ever revealing it. Even if malicious software is 

(eliminating the need for identifiers), (b) there is no need for running in the client's workstation at the time of 

a master databank of biometric prints — each print can be 35 authentication, it cannot duplicate the insert's functionality 

encrypted into the stylus 15 (much like a smart-card), (c) no at a later time. This proven cryptographic technique is now 

sensors are needed at POS terminals, as the sensor in the specified as part of the Internet Key Exchange standard 

stylus 15 is used to match the encrypted registered biometric protocol. 

print, (d) the privacy issue is significantly overcome since Either the prints of the thumb and index finger and the 

the only matching is needed is in the pen-based computer. 40 thumb can be captured and encrypted, or reliance can be 

The registered biometric print can also be encrypted in a placed on only the print of either. The index finger is 

smart card 60 within a conventional credit, debit, or check preferred if a single print is used a larger print segment will 

card. This embodiment is fully compatible with current generally result because of the grip 30 generally applied to 

encryption technology where one or more prints are already a stylus 15. 

being preserved in the smart card 60 for use at POS 45 FIG. 3C discloses yet another embodiment of the stylus 

terminals with a sensor unit positioned at each terminal — 15 of the present invention, the fingerprint sensor being 

these sensor units can be replaced by the stylus 15 of the placed in the top distal end of the stylus and tethered to the 

present invention. However, the encrypted print can also be counter top. Li order to release the stylus point from the 

within a smart driver's license or a social security card. stylus body, it becomes necessary to press the click button, 

In a first series of preferred embodiments of the identity so where the stylus point is retractable and compatible with a 

verification system of the present invention 10, the system digital surface. Since this clicking force is generally applied 

need only perform a one-to-one match to confirm user by the thumb, the captured print is compared with — a 

identification. This is accomplished by (1) the user who reference thumb print. The stylus point withdraws automati- 

owns and carries his/her own pen; (2) the user carrying an cally after a predetermined period of time after each use. 

insert 50 on his/her user that includes an encrypted print, the 55 The identity verification system of the present invention 

insert 50 being compatible with the stylus 15 tethered to one 10 is particularly useful in controlled environments. As used 

of the terminals; (3) the user carries on his/her user a herein, unless the context suggests otherwise, a controlled 

pen-based computer that is compatible with the computer environment is a community of people that: (1) requires 

network of the system; (4) the user carries on his/her user a registration to become a part of the community; and (2) 

credit/debit-type card that includes an encrypted print in 60 where the purchase of goods or services occurs. Some 

either the magnetic stripe or an IC element of a smart card; examples of controlled environments include: hotels-resorts, 

and (5) the user carries on his/her user a card that becomes luxury cruise liners, airports, banks, racetracks, bowling 

a pen (for example, see FIGS. 20A and 20B), the card -pen alleys, theme parks, hospitals, college campuses and public/ 

including an encrypted print in either the magnetic stripe or private schools, military bases, hotel-casinos, sports 

an element of a smart card. 65 complexes, shopping malls, and prisons. Once enrolled into 

The user need only employ the stylus 15 of the present the cardless transaction system of the present invention, any 

invention for signing purposes. Once a print is captured, it guest upon registration with the hotel complex has full and 
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complete access to any amenity within the complex, at 
anytime, without carrying on his/her user anything other 
than biometric identification that is inherent in his/her being. 
As used herein a "controlled environment" does not require 
a single physical structure, but rather includes a network of 
related activities administered by a centralized driver. Some 
examples of these type controlled environments include a 
bank and its customers, a regional of drugstores, health club 
facilities, restaurants, or beauty salons and their customers. 

Encryption registration systems are known in the art. U.S. 
Pat. No. 5,903,225 (Schmitt et al.) describes one method of 
encrypting a fingerprint into a card, and U.S. Pat. No. 
5,623,552 (Lane) describes a self -authentication system 
enabling identity verification. Hie stylus 15 can be used for 
one-to-one matching without a master databank of biomet- 
rics or for one -to -many matching 

(1) a wireless stylus 15 is used at the terminal; 

(2) match is confirmed internally between the user's print 
and the encrypted print; 

(3) the stylus 15 is confirmed not to be a counterfeit; 

(4) the encrypted reference print is checked to ensure that 
there has been no tampering; and 

(5) event access is enabled. 

FIGS. 6A and 6B disclose a simplified logic diagram for 
registration with the identity verification system of the 
present invention 10. The user initially registers with a 
financial institution or POS terminal by signing his/her name 
with a special identical stylus 15 and exchanging legal 
tender to open the account. The account can be a debit 
account, a savings account, a checking account, or even a 
credit account. Later when the user wants to access the 
account to pay for goods or services, he signs his/her name 
with an identical stylus 15. Whenever the user wants to 
access the credit account at a POS transaction, an identical 
stylus grip 30 is preferably used, the user signs his/her name, 
and the computer searches through the appropriate files for 
purposes of comparison (see FIGS. 7 A and 7B). When the 
biometric property is a fingerprint sensor, the size of the 
stylus 15 mandates that a smaller sensor be used, resulting 
in the capture of only a partial print. Accordingly, it becomes 
necessary that the stylus 15 includes guide means to ensure 
that the finger is positioned at the same site on the grip 30 
to ensure that the same portion of the print is captured in 
each subsequent use. However, if a cell capture sensing 
method id used such as DNA, finger position on the stylus 
15 is not critical so long as cell capture occurs and compared 
against a reference cell for matching. 

In still another preferred embodiment of the identity 
verification system of the present invention 10 additional 
biometric sensors 20 are periodically added to the stylus 15 
to provide the financial institution with all information that 
is necessary. So long as the additional sensors 20 do not 
affect the weight or balance of the stylus 15 so that finger- 
print and signature biometrics are altered, no harm is done. 

When registration occurs at someplace other than a finan- 
cial institution, such as a POS terminal, the user pays legal 
tender to the merchant (a pre-paid or stored value type of 
account) who in exchange opens an account for the user. The 
financial institution is affiliated with the merchant, thereby 
enabling the user to open an account without ever having 
any bank affiliation. Such an account can be one where the 
user opts not to use fingerprints and selects a pseudonym for 
purposes of privacy as hereinafter described. 

In one preferred embodiment of the identity verification 
system of the present invention 10, the sensors 20 capture 
the fingerprints of the index finger and thumb. The stylus 15 
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preferable has a special sensing grip 30 to fit the hand and 
enable a good reading of the thumb and index finger. The 
grip 30 is transparent. The stylus 15 is preferably portable 
and includes a sensor an optical or print imaging sensor. 

5 Once read, the images of the prints are captured for further 
processing. In one preferred embodiment, the biometric 
stylus 15 includes temperature sensors for purposes of 
activation. The sensors are well known in the art and are 
similar to the heat sensors found in elevators, the heat from 

10 the hand engaging the system. 

In another embodiment, the point of the stylus is a 
conventional fountain stylus 15 that ensures that the orien- 
tation of the stylus 15 is aligned with the print sensors 20 
disposed within the stylus 15. Preferably, a print sensor is 

15 disposed on the top surface of the stylus 15 and two 
additional sensors are disposed on the adjacent side surfaces 
of the stylus 15. This ensures repeatability of print images 
sensed. 

For a right-handed user, the index finger is aligned with 
20 the point and the thumb is positioned on the stylus surface 
abutting the left-side of the stylus top surface. For a left 
handed user, the index finger is aligned with the point and 
the thumb is positioned on the stylus surface abutting the 
right-side of the stylus top surface. By capturing and com- 
25 paring the index finger and thumb print of the applicant with 
the reference finger and thumb print, the likelihood of an 
error becomes highly unlikely. In the event that a biometric 
stylus 15 or grip 30 is not available, manual backup enables 
conventional identity confirmation. Accordingly, sensors 20 
30 are positioned within the stylus 15 to read each of these 
prints. 

The stylus 15 has a special sensing grip 30 to fit the hand 
and enable a good reading of the prints of the index finger 
and the thumb. The cross^ection of the stylus 15 is generally 

35 rectangular with rounded comers, and the print surfaces for 
the thumb and index finger are slightly recessed and con- 
cave. FIGS. 5A, 5B, 5C, 5D, and 5E disclose various 
preferred embodiments of grip 30 configurations that are 
compatible with conventional styluses and pencils, the grip 

40 30 including a cord connection to the writing surface, and 
sensors 20 being incorporated into the grip 30. FIG. 5E 
shows a teardrop configuration with the seam pointing 
upward. The applicant points the seam upward and places 
his/her index finger on one side of the seam and his/her 

45 thumb on the other side of the seam. This embodiment 
assures that only two sensors 20 are needed whether the 
applicant is right or left handed. Also, the combination 
concave -convex shape enables a larger portion of the two 
prints to be sensed by the print imaging sensors 20. FIGS. 

so 3A and 3B disclose a U-shaped grip 30 and the images 
captured therefrom with the sensors 20. 

In one variation, the biometric stylus 15 is tethered 
(attached) to a surface or couDter by means of a plastic 
coated hollow tube, containing fiber optic cable therewithin. 

55 It is through the fiber optic cable that the print images are 
transmitted to the processor disposed within the surface or 
counter. The sensors 20 are disposed within the stylus 15. In 
another variation, the biometric stylus 15 is portable. While 
the sensors 20 are also disposed within the stylus 15, the 

60 signals of the prints are transmitted to the processor for 
conversion and storage. The prints of the thumb and index 
finger are preserved in the systems processor for as refer- 
ences for subsequent comparisons. The goods and service 
providers have a similar stylus 15 which is used by the guest 

65 to confirm identification and access the credit account. 

In another embodiment a grip 30 is provided that is 
compatible with conventional styluses and pencils, the print 
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imaging sensors 20 being positioned within the grip 30. The 
grip 30 is symmetrical and preferably has a cubical shape 
with concave sidewalls. A power cord is affixed to the grip 
30 to provide power to the sensors 20 and also to prevent 
theft. If the stylus 15 wears out or breaks down, it can be 
readily replaced with another conventional stylus 15, at a 
modest cost. Also, by having standard grip sizes, any prob- 
lem with using biometric styluses of differing sizes which 
might change some of the properties of the biometrics are 
eliminated. The grip 30 configurations are designed to 
provide as good a reading as possible of as much of the index 
finger and thumb print as possible. Certain preferred 
embodiments include concave cubes (see FIG. 4C), an 
enlarged cylindrical chamber section (see attached drawing). 
The grip 30 is preferably transparent and is designed to be 
self-aligning, that is, the user must grasp the grip 30 where 
the sensors 20 are located to use the stylus 15. FIG. 4B is 
self-aligning using a lip that eliminates the need for a third 
sensor to accommodate both left and right-handed people. 
FIG. 4D discloses a fountain pen type stylus which is 
self- aligning because of the orientation of the stylus tip. 

Also, the power unit of the stylus 15 can be incorporated 
into the body of the stylus 15, making the stylus 15 portable 
and self-contained. In the other primary embodiment, the 
stylus 15 is affixed to the tablet counter to prevent theft. The 
stylus 15 includes a print imaging sensor configuration, as 
the signals of the prints are transmitted for processing. The 
fiber optic cable transmits print images to a processor. The 
processor is positioned within the surface/counter. The sty- 
lus 15 includes a sensor configuration for capturing one or 
metrics and/or biometrics. 

For transactions involving a larger pools of potential 
users, processing strategies are needed so that the system 
need not continually process millions of files to confirm or 
deny access. One main purpose of a credit-type card is to 
provide a primary identifier for file searching purposes. 
When the identity verification system of the present inven- 
tion 10 has widespread global acceptance, it will become 
necessary to distinguish the user from hundreds of millions 
of other people. It is not practical to have the driver search 
such numbers of records for each transaction. 

The primary identifier in a conventional credit card trans- 
action is any one of the following: the imprinted name; the 
imprinted PAN; or the information stored in the magnetic 
stripe (smart card). 

To replace a card, the replacement system also preferably 
includes at least one primary identifier. Examples of primary 
identifiers comprise birthday (6 digit code), zip code, PIN, 
or printed name. There is a preference for numerical data 
because of language and translation problems, since Arabic 
numbering is essentially the global standard. 

Certain basic strategies are needed. Since the fingerprints 
enable determination of whether the user is right or left 
handed, records of people that don't match the hand of the 
user are discarded immediately during processing. In one 
preferred embodiment, the signature is the first biometric 
processed (when fingerprints are not used). The print of the 
index finger and thumb are the next biometrics used. If either 
or both cannot be read, the user is so advised and the 
transaction is rejected. If the prints are of good quality, each 
is checked as against the remaining records in the pool of 
registered records. The prints of each transaction are pre- 
served and used to develop an improved composite of the 
user's prints for subsequent transactions. 

In one preferred embodiment, a numerical is used (see 
FIG. 10) t6 streamline the confirmation process. The user 
enters a zip code or perhaps a PIN which is checked prior to 
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the signature. The zip code is preferred in instances where 
the clientele is national or international, whereas a PIN is 
preferred for instances where the transaction is regional. 
There are two basic type of card transaction that the 
5 principles of the identification system of the present inven- 
tion 10 are of particular applicability to: 

Credit transactions where the user needs to identify 
himself/herself so that the institution can determine 
credit status for purposes of advancing credit. It is 
io critical that exact identity be made at time of registra- 
tion so that credit histories can be properly accessed 
and analyzed; and 
Prepaid or stored value type of transactions where the user 
has deposited an amount of money for subsequent use. 
15 In one preferred embodiment of the present invention, the 
exact identity of the user can be withheld in prepaid or 
stored-value transactions. In one preferred embodiment of 
the present invention, the stylus 15 includes an on-off 
switch. In the off position, the fingerprint sensors 20 are not 
20 used, so that the confirmation is done without sensing the 
fingerprints. In this embodiment, the signature becomes the 
primary biometric. If the user signs a pseudonym rather than 
his/her regular name, withholding his/her actual name, the 
system processes the transactions without knowing the 
25 user's actual name or his/her prints. As long as the pseud- 
onym is used to access the account, anonymity is assured 
while using the identification system of the present inven- 
tion. 

The same result can be achieved by having two separate 

30 styluses, (1) a stylus 15 which includes print sensors 20 for 
transactions where privacy is not the primary concern; and 
(2) a stylus 15 without print sensors 20 for stored value or 
prepaid accounts. In yet another preferred embodiment, the 
print sensors 20 are incorporated in the grip 30, and the grip 

35 30 is removed when the fingerprints are not to be used. The 
only thing that is necessary is that the individual be able to 
access his/her account, so that the system provides near 
perfect repeatability. Of course the user will need to remem- 
ber the alias used to access the account. This is particularly 

40 attractive feature to those people with concerns about indi- 
vidual privacy, since they may participate in blind transac- 
tions while using the stylus 15. The users can obtain 
print-outs of monthly statements by going to a special 
terminal and verifying his/her identification with a biometric 

45 stylus 15 and thereafter requesting such information. 

The identity verification system of the present invention 
10 comprises biometric registration upon entry into the 
complex, biometric access to a guest room, biometric play of 
slot machines, biometric play at gaming tables, and biomet- 

50 ric purchases on-site within the complex such as restaurants, 
lounges, boutique shops, and the like. 

A guest to register upon registration with the hotel com- 
plex confirms his/her identity upon arrival and check-in, 
selects an amount to be entered into an account, enters 

55 biometric identifiers that are to be used on-site during his/her 
stay. Thereafter whenever the guest seeks access to his/her 
room or access to the account, identification is confirmed by 
matching the biometric identifiers and the guest can partici- 
pate in amenities offered within the complex. The biometric 

60 identifiers are preferably prints of the index finger and 
thumb. The stylus 15 is preferable a stylus which has a 
special sensing grip 30 to fit the hand and enable a good 
reading of the thumb and index finger. The stylus 15 is 
preferably portable and includes a sensor an optical or 

65 imaging print sensor. Once read, the signals of the prints are 
transmitted for processing. The guest can add value to 
his/her account at terminals throughout the casino. 
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The system enables a guest to make any on-site purchase, purposes, so that it will always be needed to include some 

at a restaurant, lounge, boutique shop, or the like and access sort of signature verification into any identification system, 

the balance for use in the complex. The guest grasps a The biometrics needed are all provided by the stylus 15. 

biometric stylus 15 similar to the implement used at regis- The primary biometric is the print of the index finger, and 

tration to enter the print of the index finger and thumb. A 5 the thumb print being the other primary biometric. Some 

fingerprint sensor reads the thumb and index-finger print examples of metrics include stylus point pressure, stylus 

from the implement and seeks a match with all registered grip pressure, accelerometers, gyroscopes, position of index 

prints in the system. Once identification has been confirmed, finger, position of thumb relative to index finger. Also, a 

and the available credit balance in the guest's account is timer is extremely useful in measuring biometrics associated 

sufficient to cover the purchase, the purchase is made and the 10 with signature. The timer is useful in determining accelera- 

account balance is decreased by the amount of the purchase. tion and deceleration, the time needed to sign the name, the 

Transactions where the pool of potential users is under time spacing that the stylus 15 is lifted from the digital 

50,000 people include controlled environments like resorts, surface, and first name time, middle initial time, and last 

hotels, colleges, dormitories, theme parks, prisons, cruise name time. 

liners, and the like. For this volume of registrants, the 15 Alphanumeric data for the primary identifier can be 

primary identifier is not needed, but if used, does improve provided by (1) a digitizing inscription pad, (2) a mouse and 

transaction time and system efficiency somewhat. CRT, (3) a touch sensitive CRT, (4) voice and speech 

The identity verification system of the present invention recognition, (5) a keypad embedded in the writing surface, 

10 enables a credit card holder to convert the account to use and (6) the stylus. In applications involving larger 

with the biometric stylus 15 (see FIGS. 8 which discloses a 20 populations, one preferred embodiment includes multiple 

simplified logic diagram). The conversion process enables identifiers to speed up the system processing time, 

the cardholder to conduct either card-based transaction, Financial institutions benefit in that credit card fraud is 

pen-based transactions, or their combination. Upon signing eliminated. The Identity verification system of the present 

with the stylus 15, the system driver accesses the user record invention 10 is virtually impregnable to criminals. The 

for the cardholder and creates a duplicate record in the 25 financial institution controls the entire transaction, since 

identity verification system of the present invention 10. they capture and process as many biometrics as necessary 

Thereafter, the cardholder transfers legal tender from his/her before deciding whether or not to approve. Merchants and 

card credit balance to the new account. FIGS. 9 discloses a users also benefit since consumer fraud costs are often 

payment selector enabling a user to select which account the passed onto them. Fingerprints are recognized all over the 

transaction is to be paid from in another variation of the 30 world as positive proof of identity and are the key to the 

identity verification system of the present invention 10. system. Each finger contains up to 100 different points of 

A credit cardholder can also set up a new account at a POS distinction which never change with time. Merchants benefit 

terminal by use of his/her card. The cardholder swipes in that the transaction time is minimized. The identity 

his/her card through a cardreader and signs and prints his/her verification system of the present invention 10 system 

name using the biometric stylus 15. The biometrics are 35 minimizes the time between when the user signs his/her 

captured and the cardholder advises the credit card financial name and when the transaction is approved. The system 

institution of the amount to be transferred to the new automatically captures the fingerprint data when the user 

account. Account information is exchanged and the card is signs his/her name and processing begins immediately. Any 

no longer needed. transaction that does not involve cash requires a user sig- 

A variety of digitizing inscription pads are known in the 40 nature anyway — his/her obligation to pay. Users also benefit 

art. U.S. Pat. No. 5,652,412 (Lazzouni) discloses an appa- from improved transaction efficiency by not having to wait 

ratus for reading and storing coordinate information repre- in slow-moving lines. Users benefit in that all cards are 

sentative of the instantaneous position of a stylus on a eliminated. Cards are easily lost or stolen, signatures are 

writing surface. The system provides a writing paper having easily forged and PIN's are readily determined by criminals, 

a prerecorded pattern of pixels, each pixel containing 45 While cards are easier to carry than money, they are almost 

encoded location information which identifies an absolute as negotiable as money to sophisticated criminals. The 

and unique coordinate location on the paper. The system identity verification system of the present invention 10 

enables the simultaneously recording of written information system provides maximum security and safety for the user 

on encoded paper and for recording the written information by eliminating the need to carry all credit cards, debit cards, 

in a memory. Also, U.S. Pat. No. 5,263,742 (Koch) discloses 50 ATM cards, stored value cards, and pre-paid cards in a wallet 

a fingerprinting system where the print is developed by or purse. 

making a copy on a sensitized surface by back reflecting As shown in FIG. 2A, the identity verification system of 

radiant energy through an adhesive where the print is the present invention 10 uses a biometric stylus 15 that has 

imaged. Similarly, U.S. Pat. No. 5,709,746 (Ballard) dis- print imaging sensors 20 positioned within the unique grip 

closes a self-contained fingerprint kit, 55 30. Electronic images of the index finger and thumb are 

While the biometric stylus, signature, and other bio met- extracted during user registration. Thereafter, an applicant 

rics that can be captured by the combination stylus 15 and uses a similar stylus 15 to submit a set of prints for 

digitizing inscription pad are sufficient to distinguish the comparison with the set of prints of the authorized user — the 

user from hundreds of millions of others, an efficient search prints either match or don't match. The use of two prints 

strategy is needed. 60 makes a mistake highly unlikely. The stylus 15 will thwart 

While there has been considerable development of tech- forgers since the content of the writing is unimportant. The 
nology of improved sensing systems for signatures, the stylus 15 is provided by financial institutions, POS 
signature will never be the biometric of choice in the identity terminals, and government agencies worldwide, 
verification system of the present invention 10 since hand- In one preferred embodiment, the principles of the bio- 
writing and signatures change with time and with each 65 metric stylus 15 can be combined with signature verification 
writing such that a match with perfect confidence is not technology to identify the applicant and the writing content, 
possible. However, the signature is needed for legal Also, since prints of the index finger and thumb of the 
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writing hand are the most common biometrics, once cap- mation is analyzed when the decision of identity is in doubt 

tared the prints can be used for comparing other types of to assure that the system of the present invention 10 operates 

touch contact (e.g. — a keypad). In another preferred in a near-perfect manner. Such demographic information 

embodiment, a digitizing inscription pad is used, and the includes the location of the transaction request relative to the 

position of the stylus 15 relative to the surface enables 5 primary residence of the registrant, the frequency (if ever) 

determination of the written text An optical sensor in the th at tne registrant has ever engaged is such transactions, and 

writing surface captures the signature or the writing to be whether or not the registrant has made other transaction 

used in combination with the prints. Alternatively, the sys- during ^ past 24-hour period and where such transactions 

tern includes a keypad in the writing surface for the user to located 

enter a PIN instead of the optical sensor or in addition to the 10 ^ y£t embodimen , a ^ 30 is provided that is 

optical sensor. . . . . ± - i( compatible with conventional styluses and pencils, the print 
Registration in the identity verification system ot the . , . ... , .... . -* ™ 
* . . • i a • *m a. ■ li imaging sensors 20 being positioned within the gap 30. The 
present invention 10 is similar to opening a new bank . . , - i r n , . - , i 
account. An application provides the financial institution S n P 30 15 symmetrical and preferably has a cubical shape 
with basic information-name, address, phone number, and 15 ^ concave bewails. A power cord is affixed to the grip 
signature. The only difference is that a special stylus 15 is 30 to P r0Vlde P ower to * c scnsors 20 md also to P revent 
used that enables the financial institution to capture certain ^eft. If the stylus 15 wears out or breaks down, it can be 
data while the applicant signs his/her name. These biomet- readily replaced with another conventional stylus, at a 
rics include prints of the index finger and thumb, and point modest cost. Also, by having.standard grip sizes, any prob- 
and grip pressure. 20 lem with using biometric styluses of differing sizes which 
The account can be accessed at any POS terminal. The might change some of the properties of the biometrics are 
user signs and prints his/her name using a biometric stylus eliminated. 

15 that's identical to the stylus 15 used during registration. Some primary applications for the identity verification 

The biometrics are again captured and compared to the system of the present invention 10 include identification for 

biometrics of all registrants in search of a match. The 25 (1) Drivers' license registration and verification; (2) Voter 

financial institution then confirms that there are sufficient registration and confirmation; (3) Law enforcement; (4) 

funds in the account, deducts the amount from the account, Credit card verification; (5) All banking transactions; and (6) 

and approves the transaction. College and high school students for applying for financial 

A credit cardholder can also set up a new account at a POS aid and to confirm test-taker identification, 

terminal by use of his/her card. The cardholder swipes 30 In still another embodiment of the identity verification 

his/her card through a cardreader and signs and prints his/her system of the present invention 10, the biometric stylus 15 

name using the biometric stylus 15. The biometrics are is combined with one or more primary identifiers to authen- 

cap hired and the cardholder advises the credit card financial ticate identification to replace credit, debit cards and the like, 

institution of the amount to be transferred to the new The primary identifiers include phone number, name, area 

account. Account information is exchanged and the card is 35 code or zip code. The system performs the initial search 

no longer needed. based upon the primary identifiers) to reduce the size of the 

Automated systems evaluate the fingerprint features by universe. Then identity is either confirmed or denied based 

showing the coincidence of the minutiae features, taking upon the prints. In another preferred embodiment, additional 

into consideration the similarity, number, and unit relation- biometric sensors are used in addition to the fingerprints, 

ship of the characteristics to each other. Searching and 40 One example of the use of the identity verification system 

matching of fingerprints is accomplished by assigning each of the present invention 10 is in a hotel casino complex. The 

minutiae point a position on an x/y coordinate, a direction of system of the present invention comprises biometric regis- 

flow, and relationship to other minutiae. If a user has to use tration upon entry into the hotel-casino, biometric access to 

a stylus 15 anyway to verify a commercial transaction, why a guest room, biometric purchases on-site within the com- 

not use sensors 20 in the stylus 15 and writing surface to 45 plex such as restaurants, lounges, boutique shops, and the 

confirm identification (forget about the plastic cards). like, and biometric play of slot machines, biometric play at 

In still another preferred embodiment of the identity gaming tables, 

verification system of the present invention 10, other sensors The biometric identifiers are preferably prints of the index 

are added to the stylus 15, as necessary, to tighten security finger and thumb and are sensed by means of a stylus 15, 

and reduce fraud — including a pressure sensor to measure 50 The stylus 15 is preferable a stylus 15 which has a special 

point pressure; another pressure sensor to measure grip sensing grip 30 to fit the hand and enable a good reading of 

pressure; an accelerometer to the stylus point to measure the thumb and index finger. The stylus 15 is preferably 

stroke speed; a gyroscope positioned at the top end of the portable and includes an optical or print imaging sensor, 

stylus 15 to measure the angle of the stylus 15; a heat sensor Once read, the signals of the prints are transmitted for 

in the stylus grip 30 to measure position of the index finger 55 processing. The guest can add value to his/her account at 

relative to the point; and a position sensor in the stylus grip terminals throughout the casino complex. 

30 to measure the position of the thumb relative to the index When one uses a stylus 15, it is generally grasped by the 

finger. Additional sensors include measuring the speed of the index finger and thumb for purposes of writing on a flat 

signature, the user's finger temperature, and so on. While all surface. The stylus 15 includes two adjacent flat surfaces 

of these biometric identifiers are subject to minor variations, 60 which are specifically configured to optimize the complete - 

the financial institution checks as many as needed until it is ness of the prints taken. If the guest is right-handed, the 

satisfied that the user seeking entry is authorized to access surface used to read the index finger is to the right of the 

the account. second surface. If the guest is left handed, the surface for the 

In a perfect system, the user who is entitled to entry will index finger is to the left of the second surface. In both 

always be enabled entry, and all others will always be 65 instances the second surface is used to read the guest's 

blocked. Hence, in addition to primary identifiers and bio- thumbprint Accordingly, sensors 20 are embedded within 

metrics (primary and secondary) other demographic infor- the stylus 15 to read each of these prints. 
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A distinction is made between applications involving the infrared facial readings, feature spacings, and the like). For 

matching of prints of the guest requesting access as against example, to enter a guest room, a parallel system may 

a limited number of authorized entrants (guest room access) include a recorded message asking "Who's there?" The 

and those applications where the prints of the guest request- response is recorded through a speaker and voice recogni- 

ing access are compared against a large number of guests in 5 tion is used to identify the speaker. Speech recognition can 

the system (slot and table play in a casino). While both also be used to monitor the content of the response. Also, 

instances require a comparison with known authorized facial imaging scanners are disposed within the doors to 

entrants, the former comprises a much smaller pool and guest rooms and in overhead cameras with mirrors in the 

processing is greatly simplified. In the latter, the central casinos for use as secondary biometrics. All unauthorized 

processor needs to process a considerably more data, and 10 biometric prints can be preserved for law enforcement 

search strategies are used to streamline the search. purposes to assist in identifying and convicting burglars and 

For example, in applications involving slot machine thieves, 

access, the search compares the prints of the player seeking The system is also applicable to resort hotel complexes 

entry with all registered guests. Initially, the prints of the that do not include slot machines, tables gaming, and other 

guest seeking entry are compared with the player who last 15 type of gambling activity. Similarly, the principles of the 

played this slot machine. Absent a match, the prints are present invention are also applicable to standalone casinos 

compared with other players playing adjacent machines. that do not have guest rooms. Registration can occur for a 

Absent a match, the prints are compared with all players in standalone casino either off-site with pre-authorized third 

the general area within the last few minutes. Eventually, the parties or with the casino. 

pool is expanded until all registered guests have been 20 A debit variation of the system of the present invention 

screened for a match. To improve efficiency, the prints can provides improved user convenience for debit, pre-paid, and 

be sorted by types and styles that are well known in the art, stored-value type transactions. No credit is extended to the 

The pool is gradually expanded in logical incremental steps, user, who pays for his/her account in advance. This variation 

With each gradual expansion, previously checked prints can opens the financial system to everyone, regardless of credit 

be dropped so that they are not rechecked. This area is 25 rating, class, or legal standing. The user does not need bank 

continually expanded until a match is found or the search has affiliation, since the account is assigned to a system financial 

been completed. institution if none is designated. 

The identity verification system of the present invention The debit variation is initiated at any POS terminal, ATM, 

10 is readily adaptable to off-site purchases and other or financial institution by transferring cash, checks, money 

applications involving the telephone or the keyboard of a 30 order, or credit cards into the account. Since credit is not 

computer (not shown). It often becomes necessary to con- being extended to the user, less information is needed, 

firm positively the identity of the user on the other end of the Registration occurs directly with a financial institution, or 

telephone. For off-site purchases by phone, it is important to with the stylus 15 of the present invention during a debit 

confirm the identify of the user making the purchase. Also, transaction at a POS terminal (similar to the system of the 

many phones now have caller ID where the user receiving 35 present invention). The debit variation also provides ano- 

the incoming call can read the caller's phone number before nymity in certain types of transactions. When the size of the 

answering the call. If the caller uses the engagement member participating group is limited, such as in a controlled envi- 

of the present invention, the user receiving the call can also ronment (hotel, amusement park, etc.), a stylus 15 can be 

identify the caller. used without the fingerprint sensors 20. If the user selects a 

For the handle or handset of a telephone, the primary 40 pseudonym, authentication is confirmed by the signature and 

prints are the thumb, the index finger, and the middle finger. the other biometric sensors 20 in the stylus 15. Absolute 

In another embodiment, the optical sensors can also be identity is protected without the prints and without disclos- 

positioned relative to any of the digital keys on the phone ing a true identity. 

and confirm identification. This approach is useful in appli- Many retail outlets no longer accept checks because of 

cations involving a smaller pool of possible users since only 45 fear of forgeries. A check confirmation variation of the 

one print is read. system of the present invention 10 provides the perfect way 

The identity verification system of the present invention to authenticate identification at a POS terminal. The user 
10 when used in applications involving keypads and com- registers with the stylus 15 of the present invention when 
puter keyboards includes a modified keyboard with the opening his/her checking account. When writing a check, 
sensors positioned either relative to an existing key or a 50 the financial institution is identified and approves the trans- 
special biometric push button having a recess to enable a action. The system also ensures against overdrafts. Signature 
three-dimensional print (see FIG. 10). When one or more verification for checks is an added benefit for POS terminals 
keys are pressed, the prints of the user are read to confirm that provide the system of the present invention 10. This 
that entry is authorized. check authentication program can also replace conventional 

The optical sensors can also be positioned relative to any 55 checks. The identity verification system of the present 
of the digital keys on the keyboard and confirm identifica- invention 10 provides user authentication, access control, 
tion. A smaller pool of users is needed since only one print and personal accountability to provide— as an example- 
is read. However, keyboard sensors can be useful in use by the pharmaceutical industry. 

instances where the caller* s phone number is read and there Calm technology is the name that has been assigned to the 

are only a limited number of people authorized from that 60 third wave in computing, which is just now beginning, 

number as with a modem. Also, keyboard sensors can be Mainframes, where each computer is shared by many users 

used in combination with PIN's to provide increased secu- is the first wave. We are currently in the second wave of the 

r ity. personal computing era, where user and machine stare 

Preferably, multiple biometric prints are used to confirm uneasily at each other across the desktop. In calm 

identification. Secondary biometrics include not only 65 technology, the technology recedes into the background of 

fingerprints, thumbprints, and palm prints, but also speech our lives. These computing devices are unobtrusive and 

and voice recognition, and facial readings (retinal scans, provide seamless access to a wide variety of data and allow 
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the user to perform tasks as needed, where needed. Calm The identity verification of the present invention 10 

technology moves interaction with computers out of a user's provides network access security by; (1) controlling unau- 

central focus and into the user's peripheral attention where thorized access to the network; (2) controlling improper 

they can be used subconsciously. access b V network ™ d < 3 ) monitoring of user access 

r, . _ k^™;«~ m ™ j mnra ^ A nra 5 to network resources. The pen-based computing network 

People are becoming more and more mobile ana are 3 .„ it _ r , . * - , 

.5 . iL t . . • ■ * * . initially identifies the user, and continually controls and 

requiring access to the Internet various other systems, data, ^ ^ ^ ^ [s ^ 

and software. Systems have already evolved that require Xwo ^aditional applications of the identity verification 

users to be "connected" wherever they go all the time. system of the present invention 10 involve (a) smart-pens; 

Individuals want to take the same tools and data they have ^ ( D ) electronic commerce. The principles of the present 

at their desks wherever they may go. In addition, they want invention are completely compatible with smart-pen tech- 

to access a variety of information from wherever they or the nology. The miniature technology, which integrated sensors, 

data is located. Access to such data must be secure. mouse, digital signal processor, radio transceiver and 

Reliability and security are also important and necessary encryption software in an actual stylus 15. Smart-pen tech- 
for mobile computing to be useful. Accordingly, the mobile 15 nology captures the written text generated by the stylus 15 
user must have reliable access from anywhere at any time. for subsequent use. The device looks and works like a big 
While connected to systems and retrieving or transmitting stylus 15 but is actually a miniature computer system, 
data, security is at times extremely important. Secure con- Hence, the stylus 15 of the present invention confirms user 
nections may not be necessary when browsing the news on identity during normal usage of the stylus 15 and the 
MSNBC, for example, but are highly desirable when con- 20 smart-pen technology captures the content of the written text 
nected to corporate databases or when electronic commerce ont ° surface - ^ smart-pen technology is particularly 
is undertaken useful for students taking notes in class, writers, and man- 
18 T^mobUiiy of the user requires options other than a *&™ nt staff-the paper need not be preserved, 
mouse and keypad for data entry and network access. The ™ e ^art-pen is a wtreless stylus 15 that writes on 
size of the screeD makes it impractical to use touch-screen 25 rc ^ P a ? er bm 15 «>™ected ^ the computer. The smart- 
technology. Astylus is currently being employed in many of P en measures and acce ' eratl ™ forces ln * re , e 
these applications. The stylus is particularly useful for dimensions, an I calculating the data. The smart-pen feels 
accessing screens and menus. FIGS. 17A, 17B, and 17C J** a real pen - Assumln S the wrung surface 
show various types of mobile computing devices using to be a fixed plane, as the smait-pen writes, the stylus Up will 
pen-based technology, including (a) a lap-top computer, (b) 30 M c three -dimensional space near the paper. The 
a palm-type computer; and (c) a hand-held computer, U P of ^ *f , « calculated is a three^Jimensional 
respectively. The identity verification system of the present curv ° ^ aro , und the wnta « *?«»■ ™ e * f 10 " 
invention 10 enables the network to confirm user identity Jf cted on lhat P^e representing the stylus Up s path along 
prior to access to each menu or screen. THis is a major *? P a P er ! tms P at * ls the ™ **> *corporating unique 
improvement over a fingerprint sensor in the keypad to 35 charactensucs of the wnter Therefore signature vermcaUon 
confirm identity during log-on. 7 th .«■* sm3I ^ n d ° es not de ^ a& " ' the f a P hlc lma Si° f 

When one is "mobile" and using a computer to perform * e sl g nature but .°JJ me dynamics of the act of signing. The 

various tasks and access data, connecting to remote sites is dynamics are strictly personal and thus allow the authenU- 

simple and as transparent as possible. Using notebooks and cat i? n * C . sl S ner - # .... 

PDAs (with Windows CE), the user remains connected to 40 ™ e ,dentl, .y ^cation system of the present invention 

any number of systems while in remote locations. 10 ^ 0 P rovides a safe ™* attractive dternaUve to elec- 

Current mobile hosts such as notebooks, PDAs and eel- tromc commerce, particularly over the Internet. By authen- 

, , , j *• •* u »i i • ♦ *♦ ticating the author of a transaction, the act becomes unde- 

lular phones provide connectivity but lack interconnectivity. . , . m , , . , ^ 

j , . . mable. The advanced micro mechanics and micro 

With these devices a user connects to another system on a " , . , L1 . . 

. . . -*u* tt- i*ui u *r electromcs built into the stylus 15 enable the usage or a 

point to point basis. Using calm technology become aware 45 , . . . . J t . _ , . ° 

of each other and know how to exchange information among TC ^ P en , as biometric mput device. The stylus 15 can be 

themselves. In addition, they become able to control each used fo make Internet tactions or bank transfers secure, 

. j j because it unequivocally authenticates a user. In order to 

otner as neeneo. , . . . , . , « . 

Security is no longer an optional network component. mcrease lts _, ^^er friendliness, simple pen functions are 

Today organizations of all sizes are discovering the need to 50 incorporated witon tins miniature computer. 

* **iT- * i £- u *u ^ 1 j • * i The ease and the low cost 01 transactions over any 

protect their networks from both external and internal unau- . , . t _ . A , . . \ 

f u . , y ,1 jt t.. t „ * • network, make the stylus 15 01 the present invention an ideal 

thorized users. In the days before remote access, orgamza- ' , . / „ A r , . r ( 

tions had controlled, hard-wired networks, which provided P a y ment devlce ^ ™ ^ent device for buyers: sales 

physical security. Network access was limited to users channels Internet channels and virtual shopping. 

u • 11 i * j • *u u -IJ- n - • ~* ♦ m • ^ By authenticating the author or a transaction, the act 

physically located in the building. Requiring users to type in 55 , J , . , , ™- , . , r 

j j +u I f •* * *u« becomes undeniable. The advanced micro -technology oi the 

a name and password added another layer of security to the t1 f , A f J A . 

i -p. . j. . . n . j j j smart-pen. enables the usage ot a conventional stylus 15 as 

network. Providing remote network access has added an , . *L , + m 

, j. . j .i 1 1 a biometnc input device. Ine stylus 15 provides identity 

entirely new dimension to the problem. . , , . • -i 

tu. ~r n ™;™A „ r u* n nn „ verification for numerous electronic commercial transac- 

Ine integrity or any system is compromised when any oi . . 

the following occur: (1) confidential information is available 60 uons mclucung: 

to unauthorized parties; (2) the user's identity is not con- a ) Privacy protection for medical records and tele- 

tinually authenticated; (3) information content is corrupted medicine; 

when the information is not received as originated; (4) the b ) Trace-ability of drugs; 

user can deny the communication; (5) access control to c) Remote writing (White-boarding) on PC or TV 

resources is not controlled by authorized parties; and (6) 65 d) Image conversion of handwriting 

data resources are not available to authorized users when Another biometric that is recommended in the identity 

needed. verification system of the present invention 10 involves cell 
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capture while the pen is being used. The advantage of this 
biometric over fingerprints is that accuracy is not dependent 
upon the size of the sensor or print that is captured. 

GeneTrace Systems is currently marketing technology 
involving a new high-resolution mass spectrometry-based 
method for chemical analysis of large single -stranded DNA 
oligomers. Hie mass spectra are obtained in seconds instead 
of the usual hours needed for gel electrophoresis currently 
used, and no radioactive or fluorescent materials are needed. 
The technique has high mass capabilities and opens new 
avenues of study as in chemical modifications of DNA, 
DNA-peptide/protein interactions such as antisense drug 
development. DNA sequencing and quality control for syn- 
thetic DNA and related products are also potential applica- 
tions. The basic technology can be applied also to peptides 
and proteins and used for protein structure determination, 
phosphorylation, glycosylation, and other studies. Previ- 
ously it had not been possible to apply mass spectrometry 
successfully to anything larger than about a 4-mer and 
thereby obtain the advantages the mass spectrometry tech- 
nique can offer in precise and accurate molecular weight 
determination. The new physico-chemical sample prepara- 
tion opens this capability to single-stranded DNA molecules 
above 50,000 Dalton, with a mass accuracy of 0.01% in the 
10,000 Dalton range. This is much higher accuracy and 
resolution than is obtainable with state-of-the-art electro- 
phoresis techniques. 

Another approach is to use surface-confined arrays of 
highly selective sensing elements. Chemical and biological 
sensors are required to perform multi-analyte measurements 
rapidly, accurately, and at increasingly lower cost. Arrays of 
immobilized single-stranded DNA (ssDNA) probes, 
so-called DNA chips, are being used for genetic analysis for 
disease detection, toxicology, forensics, industrial 
processing, and environmental monitoring. 

The identity verification system of the present invention 
10 is a next generation pen based tool. It enables the most 
widely used Microsoft Windows based word processing 
application to be used as a workflow automation system by 
empowering documents with an electronic signature — 
attaching signatures to Microsoft Word documents with any 
pen device 

Trie identity verification system of the present invention 
10 enables a user to bind an electronic signature to a Word 
document. The identity verification system of the present 
invention 10 is compatible with Windows based word pro- 
cessing application to be used as a workflow automation 
system by empowering documents with an electronic sig- 
nature. The increasing use of electronic data transmission 
makes the identity verification system of the present inven- 
tion 10 a necessary product. Individuals frequently need to 
print documents to have them signed and then are required 
to fax them, scan them for storage or keep extensive hard 
copy archives. 

The identity verification system of the present invention 
10 is for use with standard business forms such as purchase 
orders, timecards, expense reports, and personel evaluations. 
The identity verification system of the present invention 10 
enables the author of a form to insert multiple signature 
blocks and specify who is to sign each signature block and 
why they are signing. The name of each designated signee 
is inserted into the appropriate signature block. 

The principles of the present invention are also applicable 
to (1) multi-purpose pens; and (2) classic pens with ink 
cartridges. As pen and pencil applications grow, many will 
want to carry one stylus -implement that can be a pen and/or 
a pencil, that is compatible with pen-based computers, and 
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can be used at POS terminals and other similar sites where 
financial transactions occur. By including a fingerprint sen- 
sor and an encrypted print within the conventional pen, the 
pen becomes the exclusive property of the one or more 

5 individuals who have their prints encrypted within the pen. 
Throughout this application, various U.S. Patents, 
Applications, PCT Applications, and Provisional Applica- 
tions are referenced by patent application number or title and 
inventor. The disclosures of these Patents/Applications in 

10 their entireties are hereby incorporated by reference into this 
specification in order to more fully describe the state of the 
art to which this technology pertains. 
It is evident that many alternatives, modifications, and 

15 variations of the identity verification system of the present 
invention will be apparent to those skilled in the art in light 
of the disclosure herein. It is intended that the metes and 
bounds of the present invention be determined by the 
appended claims rather than by the language of the above 

20 specification, and that all such alternatives, modifications, 
and variations which form a conjointly cooperative equiva- 
lent are intended to be included within the spirit and scope 
of these claims. 
What is claimed is: 

25 1 . An identity verification device for use with a computer- 
based system, the system being used in connection with an 
image that is generated on a reference surface by a user, the 
identity verification device comprising: 

30 a stylus including a tip operative to generate the image 
when contacting the reference surface, the stylus fur- 
ther including a fingerprint sensor operative to capture 
at least one fingerprint image of the user, 
a memory containing a first reference fingerprint image 

35 and a second reference fingerprint image, and 

a processor in electrical communication with the finger- 
print sensor of the stylus and the memory, the processor 
generating a first identity verification signal responsive 

^ to a comparison of a first captured fingerprint image 
and the first reference fingerprint image, 
wherein the processor receives an instruction from the 
system to generate a second identity verification signal, 
the second identity verification signal being responsive 

45 to a comparison of a second captured fingerprint image 
and the second reference fingerprint image, 
a second fingerprint image sensor on the stylus in elec- 
trical communication with the processor, wherein the 
second fingerprint image sensor is positioned to capture 

so a second fingerprint image during capture of the first 
fingerprint image by the first fingerprint sensor, and 
wherein the processor generates the identity verifica- 
tion signal based at least in part by comparing the 
second fingerprint image and a second reference fin- 

55 gerprint image. 

2. The identity verification device of claim 1, wherein the 
identity verification device includes a touch-sensitive screen 
in electrical communication with the processor, and wherein 
the tip of the stylus is operative to generate the image on the 

60 touch-sensitive screen. 

3. The identity verification device of claim 1, further 
comprising a metric sensor on the stylus in electrical com- 
munication with the processor, the metric sensor generating 
an output representing a metric property of the user, and 

65 wherein the processor generates the identity verification 
signal based at least in part using the output of the metric 
sensor. 
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4. The identity verification device of claim 1, wherein the 
stylus includes a wireless transmitter for transmitting the 
first fingerprint image, and wherein the pen-based computer 
includes a wireless receiver, in electrical communication 
with the processor, for receiving the transmitted first finger- 
print image. 

5. The identity verification device of claim 1, wherein the 
first finger fingerprint sensor is operative to capture the first 
fingerprint image without reference to contact between the 
tip of the stylus and the touch-sensitive screen of the 
pen-based computer. 

6. The identity verification device of claim 1, wherein the 
memory simultaneously stores a plurality of reference fin- 
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gerprint images corresponding to a plurality of discrete 
users; 

7. The identity verification device of claim 1, wherein the 
first finger fingerprint sensor is operative to capture the first 

5 fingerprint image without reference to contact between the 
tip of the stylus and the flat surface. 

8. The identity verification device of claim 1, wherein the 
memory simultaneously stores a plurality of reference fin- 

10 gerp rult images corresponding to a plurality of discrete 
users. 

***** 
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